04/08/2003 19:51 3144344663 CH AG ANT I PAGE 02 



entering th^i first party's personal information, said first' party's personal 
information comprising at least one of a plurality of information objects; 

assigning, by the first party, at least one of a plurality of security levels at any 
granularity to each one of the plurality of information objects, thereby enabling access to 
individually selected portions of the first party's personal information by individual 
receiving parties; \ 

storing in the datable the first party identifier, the information object and the 
security level assigned to the information object; 

receiving a request, said request comprising at least the first party identifier; 

in response to the request, selecting a first portion of the first party's personal 
information objects that could be mnsmitted to a second party; 

retrieving from the database the selected first portion of personal information 
objects; and \ 

securely transmitting the retrieved first portion of personal information objects to 
the second party. \ 

49. (New) The method of claim 48, fmther comprising the steps of: 
presenting an authorization by the second party; and 

verifying the second party's authorization. \ 

50. (New) The method of claim 49, fiirtheAcpmprising the steps of: 

obtaining a second party identifier; \ 

jf the second party is not authorized toVeceive the information, recording the 
second party identifier; and \ 

rejecting the second party's request for information. 

51. (New) The method of claim 50, further comprising the steps of: 

designating the second party as a junk requester if the second party presents a 
predetermined number of requests that are not authorized\and 
generating an alarm indication. \ 
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52. (New) The method of claim 48, further comprising the step of recording every 
access of the first partyjs personal information to create an audit traiL 




53. (New) The method of claim 48, further comprising the steps of: 
generating an authorization key; and 
providing the authorization key to the second party. 

54. (New) The method\of claim 53, wherein the step of generating an authorization 
key comprises the steps of: 

selecting at least ond set of information objects., the set of selected information 
objects comprising at least one piece of the first party's personal information; and 
creating a key to authorize access of the selected set of information objects. 



55. (New) The method of cl^jm 53, wherein the step of generating an authorization 
key comprises the step of: 

selecting the characteristics\of second party that can present the authoization key 
for information. 

56. (New) The method of claim 53V further comprising the step of: 
encoding the authorization key with at least one of a plurality of attributes* 

57. (New) The method of claim 56, wherein the at least one of a plurality of attributes 
includes an attribute of a the second p^fty who may present the authorization key to 
access the first party's information. 

58. (New) The method of claim 48 5 further comprising the steps of: 
altering the first party's personal information; and 
storing said altered personal information in the database. 

59. (New) The method of claim 58, whereifl) the step of transmitting further comprises 
the step of: 
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designating an entity to receive said altered personal information; 
optionally desi joati.ag an effective date for said alteration; and 
transmitting tbo altered personal information to the designated entity. 



60. (New) The method of claim 48, wherein the step of securely transmitting the 
information object comprises the step of: 

transmitting the information object via a communication network to a device 
coupled to the communication network. 

61. (New) The method of claim 60, wherein the device is a printer coupled to the 
communication network directly via the Internet Printing Protocol. 

62. (New) The methodW claim 48, wherein the step of securely transmitting the 
information object further comprises the step of: 

transmitting the information object via secure E-mail or public key encryption. 

63. (New) The method of paim 48, wherein the first party's personal information 
includes the first party's contact information; health-related information; medical, dental, 
information; credit/employment information; insurance information; property-related 
information; persona) demographic information; family medical history; 
biometric/genetic information; tnavel/hote) preferences; internet preferences; sartorial, 
fashion preferences; magazine! movies, book preferences; leisure preferences; 
preferences for billing or payment methods, or pleasure-related preferences. 

8, further comprising the step of: 
/ from the second party. 

65. (New) The method of claim 48\ further comprising the step of: 
authenticating the second party. \ 




64. (New) The method of claim l 
receiving an authorization kc 
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66. (New) The method of claim 48, wherein the step of receiving a request message 
from the second party caWprises the step of: 

receiving a query for the first party's personal information in a readily executable 
form* \ 

67. (New) The method of claim 48, further comprising the step of: 
periodically generating a report on the transmittal of the information. 

68. (New) A method for securing a first party's personal information, the method 
comprising the steps of: \ 

entering the first partyfs personal information, said first party's personal 
information comprising at least one of a plurality of information objects; and 

assigning, by the first party,W least one of a plurality of security levels at any 
granularity to each one of the at leastwne of a plurality of information objects. 

69. (New) A program storage device readable by a processor, said storage device 
tangibly embodying a program of instructions executable by the processor to perform the 
method steps for secure delivery of \a first party's personal information via a 
communication network, said method steps\comprising: 

storing the first party's personal information, said first party's personal 
information comprising at least one of a plurality of information objects; 

associating, by the first party, each information object with at least one of a 
plurality of security clearance levels at any granularity; 

receiving a request message to access theVirst party's personal information, said 
request message comprising an authorization keyuo access a first portion of the first 
party's personal information, said authorization Itey indicative of a- second security 
clearance level; \ 

comparing the first security clearance level and the second security clearance 
level to determine an appropriate overall clearance level; \ 

matching the request message and the overall clearance level with a second 
portion of the first party's personal information; and \ 
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securely transmitting the second portion of the first party's personal information. 

70. (New) The pr&gram storage device of claim 69, further comprising program of 
instructions executable\by the processor to perform the method steps of: 
authenticating the request message. 



71. (New) The program storage device of claim 69, further comprising program of 
instructions executable by me processor to perform the method step of: 

establishing a secute audit trail of each access of the first party's personal 
information- 



72. (New) The program korage device of claim 70, wherein the program of 
instructions executable by the processor to perform the method step of establishing a 
secure audit trail include programs of instructions executable by the processor to perform 
the method step of recording an identifier to identify a party that receives the first party's 
personal information. 

73. (New) The program, storage )dcvice of claim 70, wherein the program of 
instructions executable by the processor \o perform the method step of establishing the 
secure audit trail include program of instructions executable by the processor to perform 
the method step of recording an identifier to identify a second party. 

74. (New) The method of claim 48, further comprising the step of: 
generating an authorization key; 
providing the authorization key to the secoiid party; and 
encoding the authorization key with at least one of a plurality of criteria. 



75. (New) The method of claim 74, wherein the a\ least one of a plurality of criteria 
includes a criterion to indicate the information that can be accessed by the second party 
with the authorization key. 
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